This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json) Hash identifier: vi9HoRD9LqtgdDzbOteoJKiNy62eenuBcSyOgputOvk= Subject key identifier: F7:13:D8:9F:97:03:5D:DD:E0:70:55:5B:39:6B:04:D9:53:73:E6:CB Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3 Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3 Certificate serial: 019AF0BF56CC197B09E1F8F64F0D1B8B36C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft Manifest number: 0526 Signing time: Fri 05 Dec 2025 23:01:02 +0000 Manifest this update: Fri 05 Dec 2025 23:01:02 +0000 Manifest next update: Sat 06 Dec 2025 23:01:02 +0000 Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: akbdgSoUlpSUxy/0Bp9w1V5xPO6DNC86FKufVfK60y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:56:cc:19:7b:09:e1:f8:f6:4f:0d:1b:8b:36:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3 Validity Not Before: Dec 5 23:01:02 2025 GMT Not After : Dec 6 23:01:02 2025 GMT Subject: CN=f713d89f97035ddde070555b396b04d95373e6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c4:83:02:fd:41:0e:fe:3e:a1:2f:c9:b3:f4: 46:f7:35:a7:35:ab:49:2b:32:be:f8:7c:c8:9e:fa: 80:00:d6:ff:ed:08:b7:fc:c3:65:95:d3:18:7d:4f: 3d:a0:bf:1c:05:f1:32:5e:14:f7:9e:e1:51:aa:0f: cc:79:b3:48:76:32:07:e7:42:3d:81:6e:0f:53:3b: fd:6d:23:85:ae:9d:61:c8:75:8d:08:7d:e7:a6:ef: cc:9b:50:6e:8d:29:6d:8a:0b:1a:35:28:6c:c6:39: b4:12:e2:1f:97:c5:88:15:4d:1b:3e:36:96:4b:1a: 43:7e:ec:9b:99:04:6a:48:e4:82:4d:fa:50:72:93: 9e:32:31:c8:32:6c:f2:f6:82:13:73:78:e5:ae:d2: 1e:99:82:d9:13:07:9e:cd:c3:c6:15:cd:a6:bf:7f: a9:9d:c1:e6:5b:ca:59:ee:9d:7f:ba:fb:06:04:f0: 94:3a:a0:c7:46:23:ea:e6:26:19:ab:13:4e:b7:cc: 00:9a:e9:8b:9a:ac:bd:53:af:92:50:c1:9d:94:4e: 07:17:2a:ef:af:28:f9:fd:18:1f:45:12:a7:75:99: c0:78:cf:96:05:fd:2f:a1:e8:84:1b:00:8c:c3:c4: c6:81:92:96:cf:e6:fa:48:68:05:17:4e:dc:68:f5: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:D8:9F:97:03:5D:DD:E0:70:55:5B:39:6B:04:D9:53:73:E6:CB X509v3 Authority Key Identifier: keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:a3:9d:ef:2a:2e:d2:26:79:a2:80:26:1c:bf:16:02:c3: 30:c8:0d:67:bd:3a:33:37:b8:fe:ea:34:b0:cd:a1:40:a1:4f: 93:6b:7f:18:79:37:c5:c5:6f:a5:e2:ad:a0:4c:2a:e8:a7:cf: 5c:00:c1:43:8c:fa:d3:01:14:63:2e:10:6f:74:a3:98:7f:38: d6:9f:79:40:45:1e:d1:9f:c6:2a:b9:73:7f:ed:bb:2d:e7:09: 59:5c:b5:d4:cb:da:f3:b8:66:56:eb:9d:4a:d9:7f:57:af:9b: 54:86:c7:82:ea:a4:ca:93:d9:15:87:39:68:93:0c:c9:1c:de: 17:75:ef:10:d8:99:ad:e3:ab:0b:78:08:1c:2f:41:15:31:a8: ec:d1:12:70:de:27:e9:1e:34:c2:2d:a5:d1:ea:70:da:56:08: 8c:f6:bb:be:b8:ed:f9:da:aa:c7:26:7a:8e:08:9a:da:70:7b: a0:ac:d5:7f:89:e2:34:f8:9e:e3:7a:44:01:87:63:e0:66:68: 54:68:81:dc:23:c8:72:40:0e:95:65:10:4a:48:13:07:9c:9e: 31:b1:5a:8d:62:51:59:56:3e:25:75:cc:0e:17:f1:90:e1:16: 6e:f9:65:46:58:8d:7e:17:7d:70:0d:18:b8:a9:91:d2:66:7d: df:d2:1d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1bMGXsJ4fj2Tw0bizbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTEwOTFkMzhlZWU1OTc5NjMzYWYyNzcyOGVlOTUyMzFh ZmY2ZDMwHhcNMjUxMjA1MjMwMTAyWhcNMjUxMjA2MjMwMTAyWjAzMTEwLwYDVQQD EyhmNzEzZDg5Zjk3MDM1ZGRkZTA3MDU1NWIzOTZiMDRkOTUzNzNlNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cSDAv1BDv4+oS/Js/RG9zWnNatJ KzK++HzInvqAANb/7Qi3/MNlldMYfU89oL8cBfEyXhT3nuFRqg/MebNIdjIH50I9 gW4PUzv9bSOFrp1hyHWNCH3npu/Mm1BujSltigsaNShsxjm0EuIfl8WIFU0bPjaW SxpDfuybmQRqSOSCTfpQcpOeMjHIMmzy9oITc3jlrtIemYLZEweezcPGFc2mv3+p ncHmW8pZ7p1/uvsGBPCUOqDHRiPq5iYZqxNOt8wAmumLmqy9U6+SUMGdlE4HFyrv ryj5/RgfRRKndZnAeM+WBf0voeiEGwCMw8TGgZKWz+b6SGgFF07caPUsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcT2J+XA13d4HBVWzlrBNlTc+bLMB8GA1UdIwQY MBaAFHXhCR047uWXljOvJ3KO6VIxr/bTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEt MGQ2NzFkNDcwMDc4LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEtMGQ2NzFkNDcwMDc4 LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkejne8q LtImeaKAJhy/FgLDMMgNZ706Mze4/uo0sM2hQKFPk2t/GHk3xcVvpeKtoEwq6KfP XADBQ4z60wEUYy4Qb3SjmH841p95QEUe0Z/GKrlzf+27LecJWVy11Mva87hmVuud Stl/V6+bVIbHguqkypPZFYc5aJMMyRzeF3XvENiZreOrC3gIHC9BFTGo7NEScN4n 6R40wi2l0epw2lYIjPa7vrjt+dqqxyZ6jgia2nB7oKzVf4niNPie43pEAYdj4GZo VGiB3CPIckAOlWUQSkgTB5yeMbFajWJRWVY+JXXMDhfxkOEWbvllRliNfhd9cA0Y uKmR0mZ939IdBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:44 2025 by rpki-client